WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by longnv719 in WordPress Plugin WP Dummy Content Generator versions = 4.0.0...

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nixxies in WordPress Plugin Salon booking system versions = 10.31.7...

WordPress WP Mailster plugin <= 1.9.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by L4m in WordPress Plugin WP Mailster versions = 1.9.0.0...

WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Form Block versions = 1.8.1...

WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LearnPress versions = 4.4.9...

WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Login Lockdown versions = 2.17...

WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Import and export users and customers versions = 2.5.5...

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteVault – Backup, Restore, Migration & Cloning versions = 1.5.17...

WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Advanced Google reCAPTCHA versions = 5.40...

WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Michał Wiencek in WordPress Plugin WPO365 versions = 44.1...

WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mamgad in WordPress Plugin Delete All Comments of wordpress versions = 7.1...

WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Elaprendiz1927 in WordPress Plugin Starter Templates versions = 4.7.7...

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ayukiab in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.22...

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

Other vulnerability Type vulnerability discovered by Peter Tang in WordPress Plugin Taxi Booking Manager for WooCommerce versions = 2.1.1...

WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by fcc in WordPress Plugin Starter Templates versions = 4.7.7...

WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Rasyid Abdi Gantoro in WordPress Plugin JS Help Desk versions = 4.0.0...

WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin Name Directory versions = 1.34.2...

WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Presto Player versions = 4.5.2...

WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Event Tickets versions = 5.30.0...

WordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Premium Addons for Elementor versions = 4.11.109...

WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by changsheng in WordPress Plugin Name Directory versions = 1.34.2...

WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Logo Showcase versions = 4.0.4...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar versions = 5.14.2...

WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin eCommerce Product Catalog versions = 3.6.2...

WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...

WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Video Conferencing with Zoom versions = 4.6.10...

WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin CURCY versions = 2.2.17...

WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Mailster versions = 1.9.0.0...

WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Admin Audit versions = 1.2.17...

WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by KePulsary in WordPress Plugin JS Help Desk versions = 4.0.0...

WordPress WP Ultimate Review plugin < 2.4.4 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Wp Ultimate Review versions 2.4.4...

WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Zac Lou in WordPress Plugin WP VR versions = 9.1.3...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Intrudify in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin QR Redirector versions = 2.0.5...

WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin GiveWP versions = 4.17.0...

WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.5...

WordPress Memberful - Membership Plugin plugin <= 1.81.2 - Sensitive Data Exposure vulnerability

WordPress Memberful - Membership Plugin plugin = 1.81.2 - Sensitive Data Exposure vulnerability discovered by sungbyeongchan in WordPress Plugin Memberful - Membership Plugin versions = 1.81.2...

WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin B Blocks versions = 2.1.8...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.13...

WordPress WP Ultimate Review plugin < 2.4.4 - Unauthenticated DoS vulnerability

Unauthenticated DoS vulnerability discovered by Alban Roche in WordPress Plugin Wp Ultimate Review versions 2.4.4...

WordPress WP Ultimate Review plugin < 2.4.4 - Unauthenticated DoS vulnerability

Unauthenticated DoS vulnerability discovered by Alban Roche in WordPress Plugin Wp Ultimate Review versions 2.4.4...

WordPress WP 2FA plugin < 4.1.0 - Two-Factor Authentication Bypass vulnerability

Two-Factor Authentication Bypass vulnerability discovered by Suhayb Ahmed cyboltx in WordPress Plugin WP 2FA versions 4.1.0...

WordPress SaveTo Wishlist Lite plugin < 1.1.5 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin SaveTo Wishlist Lite versions 1.1.5...

WordPress Kubio AI Page Builder plugin < 2.9.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Kubio AI Page Builder versions 2.9.3...

WordPress Unlimited Elements for Elementor plugin 1.5.142-2.0.20 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Jakub Herman in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 1.5.142-2.0.20...

WordPress Loco Translate plugin < 2.8.9 - Translator+ Limited File Read vulnerability

Translator+ Limited File Read vulnerability discovered by Shivamani Vastrala in WordPress Plugin Loco Translate versions 2.8.9...

WordPress MPG plugin < 4.2.3 - Editor+ Arbitrary File Read vulnerability

Editor+ Arbitrary File Read vulnerability discovered by ieuns in WordPress Plugin MPG versions 4.2.3...

WordPress TillKit plugin < 1.0.5 - Unauthenticated POS Takeover vulnerability

Unauthenticated POS Takeover vulnerability discovered by Pedro Pinho in WordPress Plugin TillKit versions 1.0.5...